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IN THE CLAIMS: 
Amended claims follow: 

1 . (Currently Amended) A method of authorising an additional computer program 
module for use with a core computer program, said core computer program being 
installed, said method comprising the steps of: 

reading module signature data associated with said additional computer program 

module; 

reading core signature data and other signature data associated with said core 
computer program; 

wherein said other signature data is. user signature data; 

comparing said module signature data with said core signature data and said user 
signature data; and 

refusing authorisation of said additional computer program module for use with 
said core computer program unless said module signature data matches at least one of 
said core signature data and said user signature data; 

wherein thesaid user signature data allows a particular user to authorize thesaid 
additional computer program module for use with th esaid installed core computer 
program; 

wherein said user signature data is utilized to authorize said additional computer 
program module which is from a third party for use with said core computer program . 

2. (Cancelled) 

3. (Previously Amended) A method as claimed in claim 1 , wherein said additional 
computer program module is refused authorisation for use with said core computer 
program unless said module signature data matches both of said core signature data and 
said user signature data. 
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4. (Previously Amended) A method as claimed in claim 1 , wherein said module 
signature data, said core signature data and said user signature data include public key 
infrastructure signatures. 

5. (Previously Amended) A method as claimed in claim 1 , wherein said user 
signature data is associated with said core computer program upon installation of said 
core computer program. 

6. (Previously Amended). A method as claimed in claim 5 wherein said user 
signature data is embedded within said core computer program. 

7. (Previously Amended) A method as claimed in claim 1 , wherein said user 
signature data is embedded within said core computer program by applying a user 
specific patch to said core computer program. 

8. (Original) A method as claimed in claim 1 , wherein said core signature data is 
associated with said core computer program upon generation of said core computer 
program. 

9. (Original) A method as claimed in claim 8, wherein said core signature data is 
embedded within said core computer program. 

10. (Original) A method as claimed in claim 1, wherein said core computer program 
is an anti-virus computer program. 

1 1 . (Original) A method as claimed in claim 10, wherein said anti-virus computer 
program operates with at least one updateable anti-virus computer program module. 

12. (Cancelled) 
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13. (Original) A method as claimed in claim 1 , wherein said additional computer 
program module provides functionality independent of that of said core computer 
program. 

14. (Previously Amended) A method as claimed in claim 10, wherein said additional 
computer program module does not relate to anti-virus protection. 

1 5. (Original) A method as claimed in claim 1, wherein said additional computer 
program module is operable to patch an installed computer program. 

16. (Original) A method as claimed in claim U wherein said additional computer 
program module is operable to install another computer program. 

17. (Original) A method of generating an additional computer program module for 
use with a core computer program when authorised in accordance with the method of 
claim 1, said method comprising the steps of: 

writing said additional computer program module; 

receiving new user information from a new user of said additional computer 
program module; 

generating user signature data specific to said new user in dependence upon said 
new user information; 

associating said user signature data with said additional computer program 
module; and 

providing said additional computer program module with associated user 
signature data to said new user. 

1 8. (Original) A method as claimed in claim 1 7, wherein said step of generating uses 
a tool produced by a provider of said core computer program. 

19. (Original) A method as claimed in claim 18 5 wherein said step of associating uses 
a tool produced by a provider of said core computer program. 
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20. (Original) A method of generating an additional computer program module for 
use with a core computer program when authorised in accordance with the method of 
claim 1 , said method comprising the steps of: 

writing said additional computer program module; 

generating signature data specific to said additional computer program module in 
dependence upon said additional computer program module using a tool produced by a 
provider of said core computer program; 

associating said signature data with said additional computer program module; 

and 

providing said additional computer program module with associated signature 
data to said new user. 

21 . (Original) A method of generating an additional computer program module for 
use with a core computer program when authorised in accordance with the method of 
claim 1 % said method comprising the steps of: 

writing said additional computer program module; 
providing said additional computer program module to a new user; 
said new user associating user signature data with said additional computer 
program module; 

providing said additional computer program module and associated user signature 
data to a provider of said core computer program; 

said provider of said core computer program associating core signature data with 
said additional computer program module and associated user signature data; 

providing said additional computer program module and associated user signature 
data and core signature data to said new user. 

22. (Currently Amended) Apparatus for authorising an additional computer program 
module for use with a core computer program, said core computer program being 
installed, said apparatus comprising: 



PAGE 8/22 ' RCVD AT 4/28/200* 6:21 :45 PM [Eastern Daylight Time] * 8VR:USPTO-EFXRF-1/4 * DN1S: 8729305 * C8tD:408 071 4660 - DURATION (nrun-ss): 07-08 



n i 



Rpr 28 05 03:24p SVIPG 



408 971 4660 



-6- 

first reading logic operable to read module signature data associated with said 
additional computer program module; 

second reading logic operable to read core signature data and other signature data 
associated with said core computer program; 

wherein said other signature data is user signature data; 

a comparitor operable to compare said module signature data with said core 
signature data and said user signature data; and 

authorisation reftisal logic operable to refuse authorisation of said additional 
computer program module for use with said core computer program unless said module 
signature data matches at least one of said core signature data and said user signature 
data; 

wherein thesaid user signature data allows a particular user to authorize tfeesaid 
additional computer program module for use with thesaid installed core computer 
program! 

wherein said user signature data is utilized to autho rize said additional computer 
program module which is from a third party for u se with said core computer program. 



23. (Cancelled) 

24. (Previously Amended) Apparatus as claimed in claim 22, wherein said additional 
computer program module is refused authorisation for use with said core computer 
program unless said module signature data matches both of said core signature data and 
said user signature data. 

25. (Previously Amended) Apparatus as claimed in claim 22, wherein said module 
signature data, said core signature data and said user signature data include public key 
infrastructure signatures. 

26. (Previously Amended) Apparatus as claimed in claim 22, wherein said user 
signature data is associated with said core computer program upon installation of said 
core computer program. 
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27. (Previously Amended) Apparatus as claimed in claim 26, wherein said user 
signature data is embedded within said core computer program. 

28. (Previously Amended) Apparatus as claimed in claim 22, wherein said user 
signature data is embedded within said core computer program by applying a user 
specific patch to said core computer program. 

29. (Original) Apparatus as claimed in claim 22, wherein said core signature data is 
associated with said core computer program upon generation of said core computer 
program. 

30. (Original) Apparatus as claimed in claim 29, wherein said core signature data is 
embedded within said core computer program. 

3 1 . (Original) Apparatus as claimed in claim 22, wherein said core computer program 
is an anti-virus computer program. 

32. (Original) Apparatus as claimed in claim 31, wherein said anti-virus computer 
program operates with at least one updateable anti-virus computer program module. 

33. (Cancelled) 

34. (Original) Apparatus as claimed in claim 22, wherein said additional computer 
program module provides functionality independent of that of said core computer 
program. 

35. (Previously Amended) Apparatus as claimed in claim 3 1 , wherein said additional 
computer program module does not relate to anti-virus protection. 
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36. (Original) Apparatus as claimed in claim 22, wherein said additional computer 
program module is operable to patch an installed computer program. 

37. (Original) Apparatus as claimed in claim 22, wherein said additional computer 
program module is operable to install another computer program. 

38. (Previously Amended) Apparatus for generating an additional computer program 
module for use with a core computer program when authorised using the apparatus of 
claim 22, said apparatus comprising: 

a receiver operable to receive new user information from a new user of said 
additional computer program module; 

a user signature generating logic operable to generate user signature data specific 
to said new user in dependence upon said new user information; 

associating logic operable to associate said user signature data with an additional 
computer program module; and 

transmission logic operable to provide said additional computer program module 
with associated user signature data to said new user. 

39. (Original) Apparatus as claimed in claim 38, wherein said user signature 
generating logic uses a tool produced by a provider of said core computer program. 

40. (Original) Apparatus as claimed in claim 38, wherein said associating logic uses a 
tool produced by a provider of said core computer program. 

41 . (Original) Apparatus for generating an additional computer program module for 
use with a core computer program when authorised using the apparatus of claim 22, said 
apparatus comprising: 

signature generating logic operable to generate signature data specific to said 
additional computer program module in dependence upon said additional computer 
program module using a tool produced by a provider of said core computer program; 
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associating logic operable to associate said signature data with said additional 
computer program module; and 

transmission logic operable to provide said additional computer program module 
with associated signature data to said new user. 

42. (Original) Apparatus of generating an additional computer program module for 
use with a core computer program when authorised using the apparatus of claim 22, said 
apparatus comprising: 

first transmission logic operable to provide said additional computer program 
module to a new user; 

first associating logic operable to associate user signature data with said 
additional computer program module; 

second transmission logic operable to provide said additional computer program 
module and associated user signature data to a provider of said core computer program; 

second associating logic operable to associate core signature data with said 
additional computer program module and associated user signature data; 

third transmission logic operable to provide said additional computer program 
module and associated user signature data and core signature data to said new user. 

43. (Currently Amended) A computer program product carrying a computer program 
for controlling a computer to authorise an additional computer program module for use 
with a core computer program, said core computer program being installed, said 
computer program comprising: 

first reading' code operable to read module signature data associated with said 
additional computer program module; 

second reading code operable to read core signature data and other signature data 
associated with said core computer program; 

wherein said other signature data is user signature data; 

comparison code operable to compare said module signature data with said core 
signature data and said module signature data; and 
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authorisation refusal code operable to refuse authorisation of said additional 
computer program module for use with said core computer program unless said module 
signature data matches at least one of said core signature data and said user signature 
data; 

wherein 4h esaid user signature data allows a particular user to authorize th esaid 
additional computer program module for use with the said installed core computer 
program; 

wherein said user signature data is utilized to authorize said additional computer 
program module which is from a third party for use with said core computer program . 

44. (Cancelled) 

45. (Previously Amended) A computer program product as claimed in claim 43, 
wherein said additional computer program module is refused authorisation for use with 
said core computer program unless said module signature data matches both of said core 
signature data and said user signature data. 

46. (Previously Amended) A computer program product as claimed in claim 43, 
wherein said module signature data, said core signature data and said user signature data 
include public key infrastructure signatures. 

47. (Previously Amended) A computer program product as claimed in claim 43, 
wherein said user signature data is associated with said core computer program upon 
installation of said core computer program. 

48. (Previously Amended) A computer program product as claimed in claim 47, 
wherein said user signature data is embedded within said core computer program. 

49. (Previously Amended) A computer program product as claimed in claim 43, 
wherein said user signature data is embedded within said core computer program by 
applying a user specific patch to said core computer program. 
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50. (Original) A computer program product as claimed in claim 43, wherein said core 
signature data is associated with said core computer program upon generation of said 
core computer program. 

5 1 . (Original) A computer program product as claimed in claim 50, wherein said core 
signature data is embedded within said core computer program. 

52. (Original) A computer program product as claimed in claim 43, wherein said core 
computer program is an anti-virus computer program. 

53. (Original) A computer program product as claimed in claim 52, wherein said anti- 
virus computer program operates with at least one updateable anti-virus computer 
program module. 

54. (Cancelled) 

55. (Original) A computer program product as claimed in claim 43, wherein said 
additional computer program module provides functionality independent of that of said 
core computer program. 

56. (Previously Amended) A computer program product as claimed in claim 52, 
wherein said additional computer program module does not relate to anti- virus protection. 

57. (Original) A computer program product as claimed in claim 43, wherein said 
additional computer program module is operable to patch an installed computer program. 

58. (Original) A computer program product as claimed in claim 43, wherein said 
additional computer program module is operable to install another computer program. 
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59. (Previously Amended) A computer program product carrying a computer program 
for controlling a computer to generate an additional computer program module for use 
with a core computer program when authorised using the computer program of claim 43, 
said computer program comprising: 

receiver code operable to receive new user information from a new user of said 
additional computer program module; 

user signature generating code operable to generate user signature data specific to 
said new user in dependence upon said new user information; 

associating code operable to associate said user signature data with an additional 
computer program module; and 

transmission code operable to provide said additional computer program module 
with associated user signature data to said new user. 

60. (Original) A computer program product as claimed in claim 59, wherein said user 
signature generating code uses a tool produced by a provider of said core computer 
program. 

61 . (Original) A computer program product as claimed in claim 59, wherein said 
associating code uses a tool produced by a provider of said core computer program. 

62. (Original) A computer program product carrying a computer program for 
controlling a computer to generate an additional computer program module for use with a 
core computer program when authorised using the computer program of claim 43, said 
computer program comprising: 

signature generating code operable to generate signature data specific to said 
additional computer program module in dependence upon said additional computer 
program module using a tool produced by a provider of said core computer program; 

associating code operable to associate said signature data with said additional 
computer program module; and 

transmission code operable to provide said additional computer program module 
with associated signature data to said new user. 
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63. (Original) A computer program product carrying a computer program for 
controlling a computer to generate an additional computer program module for use with a 
core computer program when authorised using the computer program of claim 43, said 
computer program comprising: 

first transmission code operable to provide said additional computer program 

module to a new user; 

first associating code operable to associate user signature data with said additional 

computer program module; 

second transmission code operable to provide said additional computer program 
module and associated user signature data to a provider of said core computer program; 

second associating code operable to associate core signature data with said 
additional computer program module and associated user signature data; 

third transmission code operable to provide said additional computer program 
module and associated user signature data and core signature data to said new user. 

64. (Cancelled) 

65. (Currently Amended) The method as olnim e d in claim l,Amethod of authorising 
an additional computer program module for use with a core computer program, said core 
computer program being installed, said method compri sing the steps of: 

reading module signature data associated with said addit ional computer program 
module; 

reading core signature data and other signature data associate d with said core 
computer program; 

wherein said other signature data is user signature data; 

comparing said module signature data with said core sig nature data and said user 
signature data; and 

refusing authorisation of said additional computer program module for use with 
said core computer program unless said module signature data match es at least one of 
said core signature data and said user signature data: 
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wherein said user signature data allows a particular user to authorize said 
additional computer program module for use with said installed core computer program: 

wherein said user signature data is utilized to authorize said additional computer 
program module which is generated by said user for use with said core computer 
program. 

66. (Currently Amended) The method as claim e d in claim U A method of authorising 
an additional computer program module for use with a core computer program, said core 
computer program being installed, said method comprising the steps of: 

reading module signature data associated with said additional computer program 
module: ^ 

reading core signature data and other signature data associated with said core 
computer program: 

wherein said other signature data is user signature data: 

comparing said module signature data with said core signature data and said user 
signature data: and 

refusing authorisation of said additional computer program module for use with 
said core computer program unless said module signature data matches at least one of 
said core signature data and said user signature data: 

wherein said user signature data allows a particular user to authorize said 
additional computer program module for use with said installed core computer program: 

wherein said core computer program keeps a list of module providers which have 
been previously authorized by said user signature data, such that said user signature data 
becomes associated with additional computer program modules provided by module 
providers indicated on said list. 
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